Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
File: F80TGMkZxu8W0kynhGKgt94UugU.mft (raw, json)
Hash identifier: waji3u8ssEMQ99uZ6kyNYx61Fot3dnNpZ8mfLioxCZ4=
Subject key identifier: B8:37:58:4F:A0:C5:CE:99:68:91:8B:3D:2B:76:62:FA:6D:77:40:8E
Authority key identifier: 17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05
Certificate issuer: /CN=17cd1318c919c6ef16d24ca78462a0b7de14ba05
Certificate serial: 0199FA6A61BE6AEF7C8491E79C17C5E556C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
Manifest number: 6B
Signing time: Sun 19 Oct 2025 03:01:39 +0000
Manifest this update: Sun 19 Oct 2025 03:01:39 +0000
Manifest next update: Mon 20 Oct 2025 03:01:39 +0000
Files and hashes: 1: F80TGMkZxu8W0kynhGKgt94UugU.crl (hash: KMk/jLoYL28QkziHtAlhGs3O0Q5nzk1sq/4Z2zH9Gt0=)
2: fV1WZCcdLfEsqw2EdlQm5P-L0is.roa (hash: 0XqccHFLFqDbT7tC/mcDP32ySvfNB41cuIO9KikZ3oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:61:be:6a:ef:7c:84:91:e7:9c:17:c5:e5:56:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cd1318c919c6ef16d24ca78462a0b7de14ba05
Validity
Not Before: Oct 19 03:01:39 2025 GMT
Not After : Oct 20 03:01:39 2025 GMT
Subject: CN=b837584fa0c5ce9968918b3d2b7662fa6d77408e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:8d:36:54:da:61:2b:8a:c6:95:5c:ff:42:
2d:34:8e:a0:38:3b:a7:a9:30:9e:e9:e1:5d:33:4b:
13:90:5d:f7:61:29:d8:0c:d0:e8:b0:90:ab:8c:b0:
b4:70:8a:90:56:3a:b6:55:ea:a1:b9:fd:95:75:d0:
78:21:63:48:08:83:1e:18:53:2e:ff:05:52:0f:b9:
7b:b8:85:49:30:89:7e:d3:89:ac:22:c6:04:56:ab:
fa:54:1a:a5:60:eb:9b:30:ce:ee:58:e1:fd:8b:fd:
fb:78:bd:50:bc:0c:1e:42:54:17:68:96:03:29:70:
ad:c2:97:5a:2e:c4:e3:a2:74:9f:95:a6:87:83:09:
ea:3e:49:83:3c:bb:a8:50:20:9f:6e:b0:24:8e:c5:
5a:e6:d8:9b:81:54:0b:36:90:0d:c6:a3:8c:58:92:
a6:90:06:c2:56:3b:53:dc:21:85:af:e4:17:81:91:
53:45:43:44:8d:b5:ea:83:ed:5e:dc:df:a0:d3:7d:
40:7a:c8:d6:b7:52:8c:f3:a4:8f:ae:b8:52:79:6f:
34:de:93:76:52:d7:84:fc:61:5a:34:41:47:1d:d9:
b2:3c:a3:1c:28:45:ba:f7:d6:69:c3:67:95:71:85:
51:13:ff:f2:2e:d9:b3:ea:3a:90:d1:bc:13:0d:a5:
25:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:37:58:4F:A0:C5:CE:99:68:91:8B:3D:2B:76:62:FA:6D:77:40:8E
X509v3 Authority Key Identifier:
keyid:17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:99:fa:06:79:d2:80:27:45:7f:01:04:cc:e3:0b:34:48:a9:
3a:5a:b5:b0:38:2b:cd:e5:a3:2e:93:66:24:94:6a:69:b9:2e:
0e:b5:57:ba:85:08:4f:57:a0:24:7c:b1:ac:24:74:f1:af:87:
53:75:30:be:d5:9f:10:67:4a:a2:ee:ab:bc:e0:2c:22:3c:5b:
38:c2:e4:d3:57:6a:e6:1c:1e:8d:a6:86:5b:db:31:23:eb:2a:
36:7a:e5:fc:52:61:9e:58:a1:4c:1a:22:22:95:26:da:2e:af:
a3:5f:12:13:dd:93:b2:16:23:83:70:cc:4c:9d:79:f3:11:47:
a0:b3:9b:06:3c:36:22:62:e4:53:65:d2:24:04:19:34:5b:5f:
55:01:8b:d4:51:f8:f5:83:be:79:b5:df:9d:71:03:35:eb:2c:
a2:73:34:d4:44:e1:72:fc:55:66:dd:1e:77:2b:45:e3:cf:fc:
ad:ed:b9:ae:62:6d:dd:64:32:ab:b8:d6:4e:14:9f:36:59:64:
c1:be:13:47:7e:cd:ea:3e:25:b5:4f:f4:f3:1b:70:cc:7a:39:
9e:6d:df:20:bb:70:64:18:6a:6b:ea:bb:35:cd:88:20:10:ea:
20:16:d3:50:40:b9:88:98:3d:2d:a1:db:04:6f:24:61:e3:eb:
1d:b9:f1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:22 2025 by rpki-client